PT-2026-106716

Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to any absolute path. Attackers can retrieve file contents through editProjectNodeSourceFile or the...

Linux Distros Unpatched Vulnerability : CVE-2026-98204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: rmismbus - fix out-of-bounds read in rmismbwriteblock When chunking writes into SMBus blocks in rmismbwriteblock, the loop calculates blocklen using the...

PT-2026-106973

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A race condition exists in CacheStorage. This issue allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by using a specially...

Linux Distros Unpatched Vulnerability : CVE-2026-98188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: p54: validate curve data length in the calibration curve converters p54convertrev0 and p54convertrev1 read calibration curve data from the device-supplied...

SUSE SLES15: libX11-6 / libX11-6-32bit / libX11-data / libX11-devel / etc (SUSE-SU-2026:4501-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4501-1 advisory. - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow bsc1280910. - CVE-2026-94283: out-of-bounds read vulnerability in...

Linux Distros Unpatched Vulnerability : CVE-2026-98241

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: xfrm: use full sockets in local error paths xfrm6localrxpmtu and xfrm6localerror dereference skb-sk as if it always pointed at a full IPv6 socket. That is...

Linux Distros Unpatched Vulnerability : CVE-2026-104037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to the autofs responder...

Linux Distros Unpatched Vulnerability : CVE-2026-98247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcicodec: validate vendor codec count length The Read Local Supported Codecs parsers consume the variable-sized standard codec array before parsing t...

Linux Distros Unpatched Vulnerability : CVE-2026-98180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm: RCU-free the scheduler-containing ring and VM objects Both struct msmringbuffer and struct msmgemvm embed a struct drmgpuscheduler. msmringbufferdestro...

SUSE SLED15 / SLES15 Security Update : python-msgpack (SUSE-SU-2026:4443-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4443-1 advisory. This update for python-msgpack fixes the following issue - CVE-2026-57585: Unpacker reuse after a caught error can lead...

Linux Distros Unpatched Vulnerability : CVE-2026-98187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: p54: require a full expif record in PDRINTERFACELIST The PDRINTERFACELIST loop only checks that the record start is within the entry before reading an...

Linux Distros Unpatched Vulnerability : CVE-2026-98190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilcwfip2prx and mgmttx start parsing a frame once ieee80211ispublicaction returns true. That...

Linux Distros Unpatched Vulnerability : CVE-2026-98170

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix OOB struct field reads in movesmb2eatocifs In movesmb2eatocifs, the while srcsize 0 loop condition is insufficient. It allows iteration to...

PT-2026-106677

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the libipw handle assoc resp function where the system fails to properly validate the length of association responses. When processing a frame shorter than the 30-byte...

PT-2026-106567

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: validate the netif index in t7xx ccmni recv skb The netif index carried in the DPMAIF PIT header is five bits wide, but ccmni inst only has room for NIC DEV MAX 21 entries. t7xx ccmni recv skb indexes the array...

CVE-2026-98167: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix server-totalread for compound encrypted PDUs In receiveencryptedstandard, server-totalread is left at the full decrypted frame size when walking sub-PDUs of a compound encrypted frame. As a result,...

PT-2026-106324

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.31.1 Description A remote out-of-bounds read can occur within the Completions Request Handler component. The issue resides in the conv ssm forward function located in the vllm/model executor/layers/mamba/mamba mixer2.p...

PT-2026-107137

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Software Management Studio Software Repository...

PT-2026-107136

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository...

PT-2026-106576

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci codec: validate vendor codec count length The Read Local Supported Codecs parsers consume the variable-sized standard codec array before parsing the vendor codec count. Although the initial reply-size check include...